Privacy Notice - INSUPPORT^® Portal
Effective Date: October 1, 2020

The INSUPPORT^® Portal (the "Site"), a patient copay lookup and INSUPPORT^® program enrollment system operated by McKesson on behalf of Indivior Inc. ("we," "us," "our"), values the trust that healthcare providers place in us to appropriately use and protect personal information. This Privacy Notice informs users of our Site about the purposes for which we may collect, use, and share personal information and how it is protected. We want to be clear about how we're using personal information and the ways in which we protect this information. By using this Site, you accept the privacy practices presented in this Privacy Notice. We encourage you to read this Privacy Notice in full to understand our privacy practices before using this Site or submitting any personal information.

Scope

This Privacy Notice applies only to the INSUPPORT^® Portal (insupportportal.com).

The INSUPPORT^® Portal is intended for healthcare providers, patients or specialty pharmacy representatives and should only be used by adults over the age of 18.

Our affiliates may have separate websites, sub-domains, and services through other web, mobile, or cloud platforms which are not subject to this Privacy Notice. Additionally, our business partners and other third parties have their own websites and services with separate privacy practices. We encourage you to read their privacy notices and understand their privacy practices.

Personal Information We Collect

When you use the Site, we may collect personal information about you or a patient. Personal information is any information accessed, collected, or used by us that identifies an individual, or can reasonably be used to identify an individual, whether directly or indirectly. The personal information we may collect includes, but is not limited to:

• Name.
• Contact information, such as your business address, telephone number and email address.
• Professional and employment information, such as your occupation, title, NPI, and DEA numbers.
• Sensitive personal information on uploaded fax images, such as your Social Security number, financial institution account number, and signature.
• User behavioral information that is automatically collected when you access this web portal, such as your IP address, browser type, operating system, and device/user activity (such as login-logout info, sites/pages visited, number of visits, click stream, navigation, errors and crash rate). We do not link this automatically collected data to other information we collect about you.
• Information about the patient, such as name, contact information, and health related information.

Tracking Technologies We Use

We use various technologies to collect personal information about users of this Site. These technologies include the following:

• Cookies
  • We and our business partners or other service providers may utilize cookies. Cookies uniquely identify your device or user account associated with this site or service. You can control the use of cookies by adjusting your browser preferences at any time. If you reject cookies, you may still use our site, but your ability to use some features or areas of our site may be limited.
• Other Tracking Technologies
  • We use tracking technologies such as Webtrends. These technologies are used to analyze trends on individuals on an aggregated basis.

How We Respond to "Do Not Track Signals"

Some web browsers have a 'Do Not Track' feature. This feature allows you to tell websites you visit that you do not want to have your online activity tracked over time and across websites. These features are not yet uniform across browsers and not broadly supported. This web portal is not currently set up to respond to those signals.

How We Use the Personal Information Collected

We may use the personal information we collect for purposes such as:

• Managing the patient's INSUPPORT^®-related activities associated with program enrollment.

Reporting on Program Data

• We may provide your personal information to third parties that provide services to support Indivior business activities such as data analytics services.

How We Share Personal Information Collected

• We do not sell personal information about you to third parties.
• We may provide your personal information to third parties that provide services to help us with our business activities such as reporting or data analytics services.

If applicable, we may also need to share your information with third parties if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

• Meet and/or comply with applicable laws, regulations, legal processes or enforceable governmental requests;
• Enforce applicable Terms of Service, including investigation of potential violations;
• Detect, prevent, or otherwise address fraud, security or technical issues;
• Protect against harm to the rights, property or safety of our users, us, or the public as required or permitted by law; or
• Engage in a merger, acquisition, reorganization, or sale of all or a portion of our assets.

Your Choice

Where appropriate or legally required, we will describe how your information that we collect through the Site will be used and will provide choices about whether to allow us to engage in that use. It is always your choice whether you wish to provide your information through this Site, but if you do not provide the requested information, you may not be able to use all the features or functionalities of the Site.

Access to Personal Information

We will retain your personal information for as long as your account is active, as reasonably useful for commercial purposes, or as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. You can update this information by calling 844-INSPPRT (844-467-7778).

Confidentiality and Security of Patient Information

As a service dedicated to patient access, we have implemented programs to address the confidentiality and security of patient information in accordance with applicable laws.

How We Protect Your Information

We have established appropriate physical, electronic and administrative safeguards to protect the information we collect from or about our users. We restrict access to personal information to our employees, contractors, and agents who need to know that information to process it for us, and who are subject to confidentiality obligations. We may also need to share your information with others, as set out above.

Any sensitive personal information (such as health conditions) will be transmitted in an encrypted form using SSL encryption. Notwithstanding our security safeguards, it is impossible to guarantee 100% security in all circumstances. If you have any questions about security or have reason to believe that your interaction with us is no longer secure (for example, you feel that the security of any account you might have with us has been compromised), you must immediately notify us of the problem by contacting INSUPPORT^® at 844-INSPPRT (844-467-7778).

Changes to this Privacy Notice

We may periodically update this Privacy Notice to describe new features, products, or services we offer and how it may affect our use of personal information about you and your controls. Since we may change this Privacy Notice, we recommend that you check the current version available from time to time. If we make changes to this notice, we will update the "Effective Date" at the beginning of this notice.

Contact Information

If you have questions or concerns about this Privacy Notice, our information handling practices, or any other aspect of the privacy and security of your personal information, please contact us at 844-INSPPRT (844-467-7778). You may also write to us at:

INSUPPORT^®
P.O. Box 29297
Phoenix, AZ 85038